Skip to content

Commit 6cacd44

Browse files
chore: final editorial polish
1 parent 2e19142 commit 6cacd44

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

docs/changelog/2026-01-intelligent-scope-features.md

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -11,19 +11,19 @@ GitHub MCP Server now intelligently handles OAuth scopes—filtering tools based
1111

1212
## What's New
1313

14-
### OAuth Scope Challenges (Remote Server)
14+
### OAuth Scope Challenges
1515

16-
The remote server now implements [MCP scope challenge handling](https://modelcontextprotocol.io/specification/2025-11-05/basic/authorization#scope-challenge-handling). Instead of failing when you lack a required scope, it requests additional permissions dynamically—start with minimal permissions and expand them as needed.
16+
The server now implements [MCP scope challenge handling](https://modelcontextprotocol.io/specification/2025-11-05/basic/authorization#scope-challenge-handling). Instead of failing when you lack a required scope, it requests additional permissions dynamically—start with minimal permissions and expand them as needed.
1717

1818
### PAT Scope Filtering
1919

20-
For classic Personal Access Tokens (`ghp_` prefix), tools are automatically filtered based on your token's scopes. The server discovers your scopes at startup and hides tools you can't use.
20+
For classic Personal Access Tokens (`ghp_`), tools are automatically filtered based on your token's scopes. The server discovers your scopes at startup and hides tools you can't use.
2121

2222
**Example:** If your PAT only has `repo` and `gist` scopes, tools requiring `admin:org`, `project`, or `notifications` are hidden.
2323

24-
### Server-to-Server Token Handling (Remote Server)
24+
### Server-to-Server Token Handling
2525

26-
For server-to-server tokens (like `GITHUB_TOKEN` in Actions), the remote server hides user-context tools like `get_me` that don't apply without a human user.
26+
For server-to-server tokens (like `GITHUB_TOKEN` in Actions), the server hides user-context tools like `get_me` that don't apply without a human user.
2727

2828
### Documented OAuth Scopes
2929

@@ -75,6 +75,4 @@ If a tool requires `read:org` and your token has `admin:org`, the tool is availa
7575

7676
## Feedback
7777

78-
Share your experience in the [Scope filtering/challenging discussion](https://github.com/github/github-mcp-server/discussions/1802).
79-
80-
We're exploring ways to better support fine-grained permissions in the future.
78+
Share your experience in the [Scope filtering/challenging discussion](https://github.com/github/github-mcp-server/discussions/1802). We're exploring ways to better support fine-grained permissions in the future.

0 commit comments

Comments
 (0)